Analyst, Information Security

Overview:

About the company

Consilio stands as the global leader in eDiscovery, document review, flexible legal talent, and legal advisory & transformation consulting services. With its Consilio Complete suite of capabilities, the company empowers multinational law firms and corporations using innovative software, cost-effective managed services, and deep legal and regulatory industry expertise.

Job Description

Work within the Information Security, Privacy, and Compliance domain, supporting internal and external stakeholder requirements

Respond to client security questionnaires, RFI/RFPs, and due diligence assessments by collaborating with cross-functional teams

Support privacy programs and initiatives, including data protection and regulatory alignment (e.g., GDPR, HIPAA)

Contribute to compliance and certification efforts such as ISO 27001, HITRUST, SOC 2 Type II, and other relevant frameworks

Assist in internal and external audits, including evidence gathering, control validation, and audit coordination

Evaluate existing security controls and recommend practical improvements for enhanced control effectiveness

Demonstrate strong written and verbal communication skills to clearly articulate security and privacy concepts to diverse audiences

Work independently while effectively collaborating with global teams across business and support functions

Exhibit structured thinking and the ability to translate technical controls into business-relevant responses

Responsibilities:

Client & Stakeholder Engagement

Support end-to-end handling of client security enquiries, including analysis, drafting, review, and submission of responses

Collaborate with internal stakeholders (security, legal, IT, product, and operations teams) to ensure accurate and consistent responses

Security & Compliance Support

Assist in maintaining and supporting security compliance programs (ISO 27001, SOC 2, HIPAA, GDPR, etc.)

Participate in audit readiness activities, control testing, and documentation management

Track and manage client-driven compliance requirements and commitments

Privacy & Risk Management

Contribute to privacy-related initiatives, including data impact assessments, records of processing activities, and maintain privacy documentation for the team

Support risk remediation in security and privacy controls

Operational Excellence

Identify opportunities to improve response quality, turnaround time, and process efficiency

Contribute to development of knowledge repositories, standard responses, and reusable artifacts

Support automation and tooling initiatives to streamline repetitive tasks and reporting

Continuous Improvement & Reporting

Assist in tracking metrics related to client requests, SLA adherence, and quality of responses

Contribute to ongoing process maturity and standardization efforts

Qualifications:

Bachelor's degree with 3-4 years of direct experience in the field of information security

Practical understanding of security standards, processes and risk frameworks

Experience in internal audits, maintaining GRC platform

Certified Information Systems Auditor (CISA), ISO 27001 LA credential highly recommended

Why Join Us:

Be part of a collaborative and innovative work environment.

Opportunity for professional growth and development.

Competitive salary and benefits package.

Contribute to shaping the future of our software development processes.

Consilio’s True North Values

Client Experience | Listen for the “why”. Clearly define success. Be accountable. Go the extra distance to create moments that matter.

Collaboration | Treat everyone with respect. Welcome diverse views. Partner across geography, generations, and teams. Rally around final decisions.

Innovation | Always be curious (ABC). Challenge the status quo. Experiment and fail forward. Build for the future.

Grit | Focus on what matters. Work with passion and persistence. Think like an owner. Deliver results you’re proud of.